function sanitize($str) {
	$str = strip_tags($str);
	$str = str_replace("&", "&", $str);
	$str = htmlspecialchars($str, ENT_QUOTES, "ISO-8859-1");
	return $str;
}